mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(aa-log): improve rule generation on debian.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-06-11 00:08:17 +01:00
parent 08a1aba39d
commit 6f5986a05e
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 14 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
pkg/aa/profile.go
View File

@ -190,10 +190,14 @@ var (
return newFileFromLog(log) return newFileFromLog(log)
} }
}, },
"exec": newFileFromLog, "exec": newFileFromLog,
"file_inherit": newFileFromLog, "getattr": newFileFromLog,
"file_perm": newFileFromLog, "mkdir": newFileFromLog,
"open": newFileFromLog, "mknod": newFileFromLog,
"open": newFileFromLog,
"rename_src": newFileFromLog,
"truncate": newFileFromLog,
"unlink": newFileFromLog,
} }
newLogMountMap = map[string]func(log map[string]string) Rule{ newLogMountMap = map[string]func(log map[string]string) Rule{
"mount": newMountFromLog, "mount": newMountFromLog,
@ -229,10 +233,13 @@ func (p *Profile) AddRule(log map[string]string) {
} }
if !done { if !done {
if strings.Contains(log["operation"], "dbus") { switch {
case strings.HasPrefix(log["operation"], "file_"):
p.Rules = append(p.Rules, newFileFromLog(log))
case strings.Contains(log["operation"], "dbus"):
p.Rules = append(p.Rules, newDbusFromLog(log)) p.Rules = append(p.Rules, newDbusFromLog(log))
} else { default:
fmt.Printf("unknown log type: %s", log) fmt.Printf("unknown log type: %s", log["operation"])
} }
} }
} }